enable session timeout
fix bug when user newly registered and had no order info
Merge pull request #8 from jihao/master

Update